Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
File: y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft (raw, json)
Hash identifier: umoYzL37Mfu7K1JXzSMNT1AmzCHWEkaRXUMBMD8L9zs=
Subject key identifier: 1D:6D:50:6A:AB:12:34:67:91:80:CC:7B:86:E2:CC:BC:79:A9:D9:E9
Authority key identifier: CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
Certificate issuer: /CN=cb608201f88aeae9486b9fa87189d796c54027dd
Certificate serial: 01987C09CBE6185A29440719D4FC5894CC18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
Manifest number: 06A3
Signing time: Tue 05 Aug 2025 21:01:13 +0000
Manifest this update: Tue 05 Aug 2025 21:01:13 +0000
Manifest next update: Wed 06 Aug 2025 21:01:13 +0000
Files and hashes: 1: y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl (hash: L9qOUZqMXkr5hSqKcd7BtmrROfTRsVwO+7T/uKPA5Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:cb:e6:18:5a:29:44:07:19:d4:fc:58:94:cc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb608201f88aeae9486b9fa87189d796c54027dd
Validity
Not Before: Aug 5 21:01:13 2025 GMT
Not After : Aug 6 21:01:13 2025 GMT
Subject: CN=1d6d506aab1234679180cc7b86e2ccbc79a9d9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:8e:e3:08:56:8d:91:f5:45:f1:9b:07:05:
94:57:54:a2:15:3e:7e:d2:c0:e9:6c:15:99:2c:0e:
73:aa:61:91:0e:71:3b:1e:ce:fa:29:3a:f3:76:c2:
92:33:c5:de:b5:6e:ef:38:f7:e5:fc:f6:a0:34:2b:
ba:b7:1c:c9:d7:97:77:e7:56:22:b8:47:3a:e0:46:
6e:29:e8:c9:b5:26:c2:37:e4:fc:96:cd:2b:e0:7d:
32:f0:96:7a:ea:70:24:46:70:d0:14:b8:01:bc:e2:
a3:6f:1e:0d:4a:ad:6d:fc:3e:97:ee:5d:0e:46:a2:
58:e6:c7:5e:18:f3:8b:dc:ac:36:9a:38:d7:2d:72:
9d:65:25:67:63:67:9d:54:bb:85:13:3f:9d:aa:5c:
1b:5d:e9:d3:00:b7:a8:1f:a8:e1:ba:cd:0c:2c:59:
57:a8:37:63:bb:8a:47:a6:06:16:1a:10:59:68:5a:
50:c4:2e:a1:fd:31:2f:76:23:88:cc:33:47:cc:cc:
dc:bd:5b:bb:1d:13:e9:ab:7f:40:59:26:58:a9:59:
ac:43:2c:0e:df:e8:b8:9d:db:62:5f:d0:59:e0:ff:
cb:4f:68:46:80:bf:8a:15:b0:dd:ee:b0:8a:e0:5f:
fa:e6:2c:0c:70:91:8f:c9:b1:7d:e3:5d:31:17:6e:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6D:50:6A:AB:12:34:67:91:80:CC:7B:86:E2:CC:BC:79:A9:D9:E9
X509v3 Authority Key Identifier:
keyid:CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3f:a9:43:e2:04:bc:e5:04:ad:1d:19:e3:56:2b:ab:50:45:
d7:67:87:28:cb:82:3d:22:54:9b:5f:0f:b2:0f:16:cb:23:e6:
f0:75:0f:27:82:e5:b8:4b:7c:18:75:a7:aa:9f:fe:69:10:52:
cf:fa:52:18:2d:7d:40:27:69:23:8d:03:04:47:f1:b6:81:29:
f0:ed:92:ef:83:f3:64:81:33:d9:52:c9:d1:e5:8b:dd:89:63:
81:66:5d:29:7e:2a:79:b2:7a:74:76:bb:03:4c:17:06:92:49:
a3:4b:05:c8:0d:60:1d:50:07:aa:4f:5f:4e:72:bc:58:86:fd:
76:66:ff:c6:1b:a7:e8:69:22:14:97:59:6b:6e:ee:95:63:3b:
9d:49:b4:f8:83:ea:08:89:d0:40:aa:2f:a2:5f:34:17:c3:a5:
58:8e:e1:9a:3f:51:eb:9c:b6:a9:8c:b3:2a:33:4f:58:bf:07:
6f:c1:c3:9a:84:2f:36:66:1b:a1:86:a4:bf:35:ce:71:3e:40:
06:02:7f:d2:a7:1c:5c:b9:50:b8:cc:b7:e5:5e:ca:1b:9b:6a:
dc:7a:da:ba:0e:d5:6a:5c:23:65:f6:9e:c7:f4:40:a9:97:38:
e6:fa:ba:d5:7c:b2:da:09:3e:17:77:17:a8:6b:24:79:22:9d:
35:29:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:48:12 2025 by rpki-client